Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
File:                     06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json)
Hash identifier:          k4awEHP8wxKH7/7GDupmI6eRxq823J9mhDTARb8qIlU=
Subject key identifier:   77:17:F2:CB:E2:1C:F0:79:70:8A:DA:C4:2A:2A:70:AA:18:A7:30:61
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584839EACF6CCB27CE3DEC493880
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     30158
IP address blocks:        199.189.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cf:6c:cb:27:ce:3d:ec:49:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=49fbee65-fb72-493c-b63c-f13b8a21892a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:5d:5c:81:8b:42:7c:95:d7:26:f0:40:2f:
                    9a:8d:1b:86:3e:1b:f0:70:de:30:1b:bc:20:c2:66:
                    38:70:64:c8:ab:d7:76:1c:d5:a6:dd:45:7f:cb:ea:
                    3a:86:75:49:f7:0e:f8:ba:34:ca:2a:d0:3e:9f:9d:
                    15:14:8e:1c:43:ce:97:8f:7e:54:29:7c:5e:b9:b4:
                    22:de:44:7b:fa:f2:49:c7:a3:bc:ab:93:f8:e6:97:
                    c5:7d:0b:0e:86:cf:c0:1f:5e:c7:a3:0a:b9:12:24:
                    5a:60:47:99:d8:9f:4b:2b:0a:7b:20:bd:a2:ca:d3:
                    df:9b:28:fe:cc:bd:99:a6:c9:b8:05:03:a5:c6:ed:
                    57:b0:cf:1b:b5:9a:c8:57:35:18:27:a4:e5:1d:2d:
                    dd:de:4d:3b:37:3a:d2:56:88:7c:be:99:14:b0:c1:
                    20:63:e6:f3:0b:ef:d5:b9:bd:17:20:d2:7f:b6:8c:
                    f1:48:af:b6:41:4b:95:4e:4e:ca:d1:5a:c8:a9:da:
                    07:b9:27:69:d0:fe:42:43:01:34:c4:a2:ef:a1:7e:
                    b1:54:99:ea:9f:3b:e8:ce:60:73:ee:c6:8b:34:e1:
                    65:a7:05:98:53:1a:51:ea:d6:a0:32:43:9f:05:9d:
                    04:82:d1:68:83:87:8a:7a:f4:52:85:3a:df:21:ed:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:17:F2:CB:E2:1C:F0:79:70:8A:DA:C4:2A:2A:70:AA:18:A7:30:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:1b:88:d7:70:ee:c4:20:ac:13:7b:05:6a:42:f5:65:a4:
         be:68:e1:08:40:d6:f1:39:44:7f:07:57:1b:2f:86:3e:d4:9c:
         cf:87:1a:8b:ab:9a:81:eb:b4:e1:34:35:8a:b1:1d:d8:d7:b9:
         bf:7a:12:b9:e0:00:d8:68:fa:df:2e:ac:22:83:d0:b7:7b:20:
         b4:30:73:b3:78:93:74:94:ac:a8:34:8c:d2:b2:f1:24:0f:e3:
         a2:88:2c:a2:d2:f4:f0:fb:19:16:0f:41:38:59:1f:94:72:96:
         7f:66:c7:5f:63:b3:10:1d:01:73:21:70:fc:93:0e:e8:3b:6f:
         35:34:f9:93:d6:28:3f:ee:ee:37:29:19:00:da:c6:f9:7b:22:
         47:51:0a:7c:a9:78:44:98:b3:a4:fd:19:79:90:60:af:f4:b3:
         d3:50:23:6d:bd:f1:8a:bb:0f:ef:e5:87:df:ff:8b:5d:92:c3:
         9e:2b:1b:4f:34:a4:c5:8a:7f:58:26:5d:f5:40:ce:16:d0:98:
         d5:24:1b:15:a1:b7:f7:87:f7:b6:db:a3:05:3f:1e:16:44:2a:
         c6:13:3c:a9:f6:a4:3f:1a:19:d9:dc:10:7f:22:64:cb:1a:46:
         fc:3e:14:54:43:35:35:67:f1:a1:27:0b:ab:ce:2d:21:f9:8e:
         ea:ff:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:05 2025 by rpki-client